Sequence Numbers

Some systems allow you to configure how the system handles initial sequence
number generation. For extranet and Internet deployments, set this parameter
so initial sequence number generation is based on RFC 1948 to prevent sequence
number attacks. In such environments, other TCP tuning settings mentioned
here are not useful.

On Solaris systems, this behavior is configured through the tcp_strong_iss parameter.